Last updated: 1 August 2026
1. ABOUT THIS PRIVACY POLICY
This Privacy Policy explains how Suzanne Apartments Kft. collects, uses, stores and shares personal data when you visit https://suzanneapartments.eu, contact us, join our waiting list, request or book accommodation, enter into a tenancy agreement or otherwise use our services.
We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), applicable Hungarian data-protection law and other applicable legal requirements.
2. DATA CONTROLLER AND CONTACT DETAILS
The data controller is:
Suzanne Apartments Kft.
Registered address: 3671 Borsodnádasd, Kossuth Lajos út 29., Hungary
Tax number: 32465264-1-05
Website: https://suzanneapartments.eu
Email: info@suzanneapartments.eu
Suzanne Apartments Kft. determines the purposes and means of the processing described in this Privacy Policy.
We have not appointed a Data Protection Officer because we are not currently required to do so. Questions and requests concerning personal data may be sent to info@suzanneapartments.eu.
3. PERSONAL DATA WE COLLECT
The personal data we collect depends on how you interact with us and which service you request.
3.1 Enquiries and accommodation requests
When you contact us through the Website, email, telephone, WhatsApp, social media or another communication channel, we may collect:
– your name;
– email address;
– telephone number and messaging contact details;
– preferred accommodation, rental dates and budget;
– nationality, age or date of birth and gender where relevant to an accommodation request or shared-apartment preference;
– university, student status, occupation or employer;
– preferred district, room type and other accommodation preferences;
– the content of your enquiry and subsequent correspondence; and
– any other information you voluntarily provide.
Please do not send sensitive personal data unless it is genuinely necessary and we have requested it.
3.2 Waiting-list information
If you join our accommodation waiting list, we may collect the information listed above as well as your expected arrival and departure dates, preferred room type, budget, university and your consent choices regarding partner offers and marketing communications.
Joining the waiting list does not guarantee that accommodation will become available.
3.3 Booking and tenancy information
If you request a booking or enter into a tenancy agreement, we may collect:
– full name;
– date and place of birth where required for the agreement or legal administration;
– nationality;
– permanent or residential address;
– email address and telephone number;
– passport, identity-card or other identification details and, where reasonably necessary, a copy of the relevant document;
– university, student or employment information;
– accommodation address, rental period and booking details;
– signed tenancy agreements, declarations and related documents;
– emergency contact details where voluntarily provided;
– details of a parent, legal guardian, guarantor or third-party payer where applicable;
– arrival, check-in and check-out information;
– payment status, transaction references, account-holder information and other payment-related records;
– invoices, deposit settlements and utility calculations;
– maintenance requests, complaints, photographs, videos and correspondence relating to the tenancy; and
– information about damage, contractual breaches, claims or disputes where applicable.
We normally receive payments by bank transfer. We do not request or store your online-banking password, complete card authentication data or other banking login credentials.
If another person provides personal data on your behalf, or you provide the details of a guarantor, guardian, emergency contact or payer, the person providing the information must ensure that they are authorised to do so and that the other individual is informed of this Privacy Policy.
3.4 Website and technical data
When you use the Website, we or our service providers may process:
– IP address;
– device and browser type;
– operating system;
– referring and visited pages;
– approximate location derived from technical data;
– date, time and duration of visits;
– cookie preferences;
– security logs and error information; and
– information about interactions with the Website.
Non-essential analytics or marketing technologies are used only where the required consent has been obtained. Further information is available in our Cookie Policy and through the Cookie Settings panel on the Website.
3.5 Information received from other sources
We may receive personal data from:
– a parent, guardian, guarantor or person arranging or paying for accommodation;
– a university, student organisation or accommodation partner;
– a property owner, building manager, flatmate or contractor;
– a payment service provider, bank, accountant or debt-recovery provider;
– publicly available sources where necessary to verify information or protect our legal interests; or
– a competent public authority where permitted or required by law.
4. WHY WE PROCESS PERSONAL DATA AND OUR LEGAL BASES
4.1 Responding to enquiries and taking steps before a contract
We process contact details, accommodation preferences and correspondence to answer enquiries, check availability, prepare an offer and take steps requested before entering into a tenancy agreement.
Legal basis: taking steps at the data subject’s request before entering into a contract under Article 6(1)(b) GDPR.
4.2 Managing bookings and tenancy agreements
We process booking, identity, contact, payment and tenancy information to:
– prepare, conclude and administer the Tenancy Agreement;
– allocate and keep accommodation reserved;
– collect rent, deposits and additional costs;
– arrange check-in and check-out;
– communicate important information about the accommodation;
– coordinate maintenance and repairs;
– manage deposit settlements; and
– handle matters arising during the tenancy.
Legal basis: performance of a contract or taking requested steps before entering into a contract under Article 6(1)(b) GDPR.
4.3 Compliance with legal obligations
We process and retain information where necessary for accounting, taxation, invoicing, company administration, regulatory reporting, cooperation with authorities and other legal obligations.
Legal basis: compliance with a legal obligation under Article 6(1)(c) GDPR.
4.4 Protecting property, preventing misuse and handling legal claims
We may process relevant information to verify identity, protect residents and property, prevent fraud or misuse, investigate damage or contractual breaches, collect unpaid amounts, respond to complaints and establish, exercise or defend legal claims.
Legal basis: our legitimate interests and, where relevant, the legitimate interests of property owners and other residents under Article 6(1)(f) GDPR. Our interests include operating a safe and reliable accommodation service, protecting property, enforcing contracts and preventing financial loss. We consider the necessity and proportionality of the processing and the rights of the affected person.
4.5 Waiting list and accommodation offers
We use waiting-list information to match applicants with suitable accommodation offered directly by Suzanne Apartments.
Legal basis: taking requested steps before a possible contract under Article 6(1)(b) GDPR.
If you separately agree that we may share your information with selected accommodation partners, we may forward the relevant details or arrange an introduction so that the partner can contact you with an offer.
Legal basis for sharing data with an independent partner: your consent under Article 6(1)(a) GDPR. You may withdraw this consent at any time before the relevant sharing takes place.
If a partner receives your data, that partner may act as a separate data controller and must provide information about its own processing. A contract offered by a partner is concluded with that partner and not with Suzanne Apartments unless expressly stated otherwise.
4.6 Marketing communications
We may send newsletters, availability updates, promotions or similar marketing messages only where you have given consent or another lawful basis applies.
Legal basis: consent under Article 6(1)(a) GDPR.
You can withdraw your consent at any time by using the unsubscribe option in the communication or contacting info@suzanneapartments.eu. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Service messages concerning an active enquiry, booking, payment, tenancy, maintenance matter or check-out are not marketing communications and may be sent where necessary to provide the requested service or perform the contract.
4.7 Website operation, security and analytics
We process limited technical data to operate and secure the Website, diagnose technical problems and prevent malicious activity.
Legal basis: our legitimate interest in maintaining a secure and functional Website under Article 6(1)(f) GDPR.
Where analytics, functional or marketing cookies require consent, the legal basis is consent under Article 6(1)(a) GDPR. More information is provided in our Cookie Policy.
5. WHETHER PROVIDING DATA IS REQUIRED
Providing information marked as required during the booking and contracting process is necessary to prepare or perform the Tenancy Agreement and meet relevant legal obligations. If you do not provide the required information, we may be unable to process the booking, enter into the agreement or provide the accommodation.
Providing information for marketing or partner offers is voluntary. Refusing or withdrawing consent for these purposes does not affect an existing tenancy or your ability to contact us about our own accommodation.
6. WHO MAY RECEIVE PERSONAL DATA
We share personal data only where necessary, proportionate and supported by an appropriate legal basis. Recipients may include:
– property owners, landlords or authorised property managers where necessary to manage the accommodation;
– accountants, invoicing providers and tax advisers;
– banks and payment service providers;
– website hosting, email, cloud storage, form, document-signing and IT service providers;
– communication service providers used for email, telephone or messaging;
– maintenance professionals, cleaners and other contractors where contact or access information is required for an appointment;
– legal advisers, insurers, debt-recovery providers and other professional advisers where necessary;
– selected accommodation partners where you have consented to the sharing or another valid legal basis applies; and
– courts, police, tax authorities, regulatory bodies and other competent authorities where disclosure is required or permitted by law.
Service providers acting on our behalf may process personal data only for the agreed purposes and under appropriate contractual and confidentiality obligations.
We do not sell personal data.
7. INTERNATIONAL DATA TRANSFERS
Some technology or communication service providers may process personal data outside the European Economic Area (“EEA”). Where this occurs, we use a transfer mechanism recognised by the GDPR, such as:
– an adequacy decision adopted by the European Commission;
– the European Commission’s Standard Contractual Clauses, together with supplementary safeguards where required; or
– another valid transfer mechanism permitted by applicable law.
Information about the relevant safeguards may be requested by contacting info@suzanneapartments.eu.
8. HOW LONG WE KEEP PERSONAL DATA
We retain personal data only for as long as necessary for the purpose for which it was collected and for any additional period required by law or reasonably necessary to handle legal claims.
Our general retention periods are:
– Unsuccessful general enquiries: normally up to 12 months after the last meaningful communication, unless a longer period is necessary because of a complaint or potential legal claim.
– Waiting-list data: until the requested accommodation period has ended or for up to 12 months after the last interaction, whichever occurs first, unless you renew your request or ask us to delete the data earlier.
– Partner-sharing consent records: for as long as needed to demonstrate the consent and any resulting introduction, subject to applicable limitation periods.
– Booking and tenancy records: for the duration of the tenancy and generally for up to 5 years after its end where necessary for contractual administration and the establishment, exercise or defence of legal claims.
– Accounting records, invoices and supporting documents: for the period required by Hungarian accounting and tax law, generally 8 years.
– Identification documents: only for as long as necessary for verification, contracting, a legal obligation or a documented legal claim. Copies are deleted or securely restricted when they are no longer needed.
– Maintenance requests, damage reports, complaints and related evidence: for the tenancy and, where relevant, for up to 5 years after resolution or the end of the tenancy.
– Marketing data: until you withdraw consent or unsubscribe, or until we determine that the contact is no longer active or relevant.
– Cookie and consent records: for the period stated in the Cookie Settings panel or for as long as necessary to demonstrate and respect your preferences.
– Security logs: normally for a limited period appropriate to the security purpose, unless an incident requires longer retention.
We may retain data for longer where required by law, requested by a competent authority or necessary for ongoing legal proceedings. When data is no longer required, it is deleted, anonymised or securely archived with access restrictions.
9. DATA SECURITY
We apply appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
These measures may include access controls, password protection, secure storage, encrypted connections, backups, confidentiality requirements, limited access based on business need and appropriate safeguards for service providers.
No internet transmission or storage system can be guaranteed to be completely secure. If a personal-data breach occurs, we will assess it and notify the competent supervisory authority and affected individuals where required by law.
10. AUTOMATED DECISION-MAKING
Suzanne Apartments does not currently make decisions producing legal or similarly significant effects solely through automated processing, including profiling.
11. YOUR DATA-PROTECTION RIGHTS
Subject to the conditions and limitations of the GDPR, you may have the right to:
– Access: obtain confirmation of whether we process your personal data and receive a copy and related information.
– Rectification: have inaccurate or incomplete personal data corrected.
– Erasure: request deletion of personal data where there is no lawful reason for continued processing.
– Restriction: request that processing be limited in certain circumstances.
– Data portability: receive personal data you provided in a structured, commonly used and machine-readable format, and have it transmitted to another controller where the legal conditions are met.
– Objection: object, on grounds relating to your particular situation, to processing based on legitimate interests.
– Object to direct marketing: object at any time to the use of your personal data for direct marketing. If you object, we will stop processing your data for this purpose.
– Withdraw consent: withdraw consent at any time where processing is based on consent, without affecting prior lawful processing.
– Lodge a complaint: submit a complaint to a competent data-protection supervisory authority.
These rights are not absolute. For example, we may retain information where processing is required by law or necessary for the establishment, exercise or defence of legal claims.
To exercise a right, contact info@suzanneapartments.eu and describe your request. We may ask for information reasonably necessary to verify your identity. We will respond without undue delay and normally within one month, subject to any extension permitted by the GDPR.
12. RIGHT TO COMPLAIN
You may lodge a complaint with the Hungarian supervisory authority:
Hungarian National Authority for Data Protection and Freedom of Information
(Nemzeti Adatvédelmi és Információszabadság Hatóság – NAIH)
Address: 1055 Budapest, Falk Miksa utca 9–11., Hungary
Postal address: 1363 Budapest, Pf. 9., Hungary
Website: https://www.naih.hu
Email: ugyfelszolgalat@naih.hu
You may also contact the supervisory authority in the EU or EEA country of your habitual residence, place of work or the place of the alleged infringement where applicable.
We encourage you to contact us first so that we can try to resolve your concern directly.
13. THIRD-PARTY WEBSITES AND COMMUNICATION SERVICES
The Website may contain links to external websites, maps, social-media platforms, review sites or communication services. These organisations may act as independent data controllers and apply their own privacy policies. Suzanne Apartments is not responsible for the privacy practices of independent third-party websites or services.
If you contact us through WhatsApp, social media or another third-party platform, that provider also processes information under its own terms and privacy policy.
14. CHILDREN AND PERSONS UNDER 18
Our accommodation services are generally intended for adults. We do not knowingly collect personal data directly from a person under 18 for the purpose of entering into a tenancy without appropriate involvement and authorisation from a parent or legal guardian.
Where accommodation for a minor is expressly accepted, we process only the information reasonably necessary to assess and administer the arrangement, including the relevant guardian’s contact details, consent and declarations.
15. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy when our services, data-processing activities or legal obligations change. The latest version will be published on this page with the date of the most recent update.
Where a change materially affects how we use personal data, we will provide additional notice where required or appropriate. Changes do not retrospectively create consent for a new purpose.
16. CONTACT
For questions, requests or concerns concerning this Privacy Policy or the processing of your personal data, contact:
Suzanne Apartments Kft.
Email: info@suzanneapartments.eu
Postal address: 3671 Borsodnádasd, Kossuth Lajos út 29., Hungary
© 2026 Suzanne Apartments Kft. All rights reserved.
0%